smokeloader | f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4 | Triage

Sharing

General

Target

f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
Size

308KB
Sample

240429-precwsba4w
MD5

a67bd7f7561572171f83b52c30223084
SHA1

ae492d1367a04b88911613300ab44c4f261f2de6
SHA256

f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
SHA512

00ca0cc38816032820bca91a8d73448501b10db5a16ee86d7e7e7363bd64da9212cee7beb68a32c5844ffed18eb83575291db0ec78a82cafe85dd156c53e4332
SSDEEP

3072:/5yNsLNzpVBsHxP+P+KbLinUMpSOL0U59OuvrERaKGjEhlZRQAHziHE8sI7I8NU:LVnBqqVYrAOIU7RERa/Q1mE8sMNU

Score

10^/10

smokeloader pub3 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub3

Targets

- Target
  
  f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
- Size
  
  308KB
- MD5
  
  a67bd7f7561572171f83b52c30223084
- SHA1
  
  ae492d1367a04b88911613300ab44c4f261f2de6
- SHA256
  
  f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
- SHA512
  
  00ca0cc38816032820bca91a8d73448501b10db5a16ee86d7e7e7363bd64da9212cee7beb68a32c5844ffed18eb83575291db0ec78a82cafe85dd156c53e4332
- SSDEEP
  
  3072:/5yNsLNzpVBsHxP+P+KbLinUMpSOL0U59OuvrERaKGjEhlZRQAHziHE8sI7I8NU:LVnBqqVYrAOIU7RERa/Q1mE8sMNU
Score

10^/10

smokeloader pub3 backdoor trojan
- SmokeLoader
  Modular backdoor trojan in use since 2014.
  trojan backdoor smokeloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

smokeloaderpub3backdoortrojan

behavioral2

smokeloaderpub3backdoortrojan